Kevin, Are you accessing /cas/login or do you have a another application that is configured to use CAS? If a different application, is it running in the same tomcat as CAS or perhaps even on a different computer?
Perhaps tomcat needs to have the certificate path in the https section of conf/server.xml. Ray On Tue, 2018-02-20 at 11:43 -0800, Kevin Liu wrote: I did do that but I'm still getting the same error it seems. Is there anything I'd have to restart for the change to take effect? On Tuesday, February 20, 2018 at 11:39:47 AM UTC-6, rbon wrote: Kevin, If you are using a self signed cert, it must be added into the java environment. Something like: install self signed certificates in java certificate store (must be done for every java upgrade) sudo keytool -import -file /etc/ssl/certs/name_of.crt -alias name_of -keystore $JAVA_HOME/jre/lib/security/cacerts Ray On Tue, 2018-02-20 at 07:59 -0800, Kevin Liu wrote: I'm running into a PKIX path building failed and in the documentation it lists this: "The problem here is that the CAS client does not trust the certificate presented by the CAS server; most often this occurs because of using a self-signed certificate on the CAS server. " I'm currently using tomcat to run cas vanila server. What would be the CAS client in this scenario? -- Ray Bon Programmer analyst Development Services, University Systems 2507218831 | CLE 019 | rb...@uvic.ca<javascript:> -- Ray Bon Programmer analyst Development Services, University Systems 2507218831 | CLE 019 | r...@uvic.ca -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/1519158064.1765.59.camel%40uvic.ca.
